CVE-2019-8797

creationtimestamp| type| source ---|---|--- 2024-01-29 20:21:10+00:00| seen| https://t.me/ctinow/175510 2024-01-31 10:36:58+00:00| seen| https://t.me/ctinow/176635 2024-01-31 13:37:02+00:00| seen| https://t.me/ctinow/176735...

CVE-2023-50785

creationtimestamp| type| source ---|---|--- 2024-01-25 07:26:42+00:00| seen| https://t.me/ctinow/173296 2024-01-25 12:41:18+00:00| seen| https://t.me/ctinow/173408...

Exploit for Forced Browsing in Fortra Goanywhere_Managed_File_Transfer

CVE-2024-0204: Fortra GoAnywhere MFT Authentication Bypass Dee...

CVE-2024-23207

creationtimestamp| type| source ---|---|--- 2024-01-23 02:31:47+00:00| seen| https://t.me/ctinow/171631 2024-02-16 16:52:01+00:00| seen| https://t.me/ctinow/186504 2024-02-16 16:52:04+00:00| seen| https://t.me/ctinow/186505 2024-02-16 16:52:05+00:00| seen| https://t.me/ctinow/186506...

Kasseika Ransomware Deploys BYOVD Attacks, Abuses PsExec and Exploits Martini Driver

In this blog, we detail our investigation of the Kasseika ransomware and the indicators we found suggesting that the actors behind it have acquired access to the source code of the notorious BlackMatter ransomware...

CVE-2023-42833

creationtimestamp| type| source ---|---|--- 2024-01-21 10:16:47+00:00| seen| https://t.me/ctinow/170790 2024-01-30 08:41:33+00:00| seen| https://t.me/ctinow/175749 2024-01-30 08:41:34+00:00| seen| https://t.me/ctinow/175750...

RHSA-2024:0304

creationtimestamp| type| source ---|---|--- 2024-01-18 22:17:07+00:00| seen| https://t.me/ctinow/169961...

CISA and FBI Release Known IOCs Associated with Androxgh0st Malware

Today, CISA and the Federal Bureau of Investigation FBI released a joint Cybersecurity Advisory CSA, Known Indicators of Compromise Associated with Androxgh0st Malware, to disseminate known indicators of compromise IOCs and tactics, techniques, and procedures TTPs associated with threat actors...

Known Indicators of Compromise Associated with Androxgh0st Malware

Actions to take today to mitigate malicious cyber activity: 1. Prioritize patching known exploited vulnerabilities in internet-facing systems. 2. Review and ensure only necessary servers and services are exposed to the internet. 3. Review platforms or services that have credentials listed in .env...

CVE-2024-0528

creationtimestamp| type| source ---|---|--- 2024-01-15 02:27:00+00:00| seen| https://t.me/ctinow/168121 2024-02-03 09:07:06+00:00| seen| https://t.me/ctinow/178439...

CVE-2024-20709

creationtimestamp| type| source ---|---|--- 2024-01-11 22:22:05+00:00| seen| https://t.me/ctinow/166872 2024-01-15 14:26:55+00:00| seen| https://t.me/ctinow/168369 2024-02-03 12:46:30+00:00| seen| https://t.me/ctinow/178538...

Design/Logic Flaw

Nginx-UI is an online statistics for Server Indicators?? Monitor CPU usage, memory usage, load average, and disk usage in real-time. This issue may lead to information disclosure. By using DefaultQuery, the "desc" and "id" values are used as default values if the query parameters are not set. Thu...

CVE-2024-22196 Authenticated (user role) SQL injection in `OrderAndPaginate` (GHSL-2023-270)

Nginx-UI is an online statistics for Server Indicators​​ Monitor CPU usage, memory usage, load average, and disk usage in real-time. This issue may lead to information disclosure. By using DefaultQuery, the "desc" and "id" values are used as default values if the query parameters are not set. Thu...

CVE-2024-22196 Authenticated (user role) SQL injection in `OrderAndPaginate` (GHSL-2023-270)

Nginx-UI is an online statistics for Server Indicators​​ Monitor CPU usage, memory usage, load average, and disk usage in real-time. This issue may lead to information disclosure. By using DefaultQuery, the "desc" and "id" values are used as default values if the query parameters are not set. Thu...

Information disclosure

Nginx-ui is online statistics for Server Indicators?? Monitor CPU usage, memory usage, load average, and disk usage in real-time. The Home Preference page exposes a small list of nginx settings such as Nginx Access Log Path and Nginx Error Log Path. However, the API also exposes testconfigcmd,...

CVE-2023-52064

creationtimestamp| type| source ---|---|--- 2024-01-10 22:32:16+00:00| seen| https://t.me/ctinow/166159 2024-01-18 01:16:37+00:00| seen| https://t.me/ctinow/169528 2024-01-28 20:01:58+00:00| seen| https://t.me/ctinow/175011...

CVE-2023-51958

creationtimestamp| type| source ---|---|--- 2024-01-10 16:32:17+00:00| seen| https://t.me/ctinow/165915 2024-01-13 08:17:00+00:00| seen| https://t.me/ctinow/167731 2024-01-28 14:56:53+00:00| seen| https://t.me/ctinow/174960...

CVE-2023-48242

creationtimestamp| type| source ---|---|--- 2024-01-10 12:21:53+00:00| seen| https://t.me/ctinow/165736 2024-01-28 10:26:54+00:00| seen| https://t.me/ctinow/174886...

CVE-2020-26627

creationtimestamp| type| source ---|---|--- 2024-01-10 10:26:46+00:00| seen| https://t.me/ctinow/165679 2024-01-16 19:16:45+00:00| seen| https://t.me/ctinow/168961 2024-01-28 09:26:53+00:00| seen| https://t.me/ctinow/174865...

CVE-2023-52304

creationtimestamp| type| source ---|---|--- 2024-01-03 10:26:53+00:00| seen| https://t.me/ctinow/162285 2024-01-04 01:34:04+00:00| seen| https://t.me/cibsecurity/74298 2024-01-23 14:26:41+00:00| seen| https://t.me/ctinow/171992...